开发者

Wireshark doesnt' recognises RTMP streams

I found on the web few samples on tracking RTMP (Real Time Messaging Protocol) with Wireshark, but it doesn't work for me. All RTMP开发者_Python百科T packets rendered as basic TCP packet like this:

149 14.324999   85.115.xxx.xxx  192.168.1.20    TCP macromedia-fcs > 54557 [ACK] Seq=1 Ack=1452 Win=69 Len=0

I'm using Wireshark 1.2.8 with all protocols installed on Windows Vista.

What can i do to fix it?

Thx!


WireShark relies on a few heuristics to decide how to decode a stream. One of them is the port number.

The first item to check: is the RTMP using the standard port 1935 in this capture? If not, tell WireShark how to decode it (see last step below).

The second item to check: turn on heuristics Edit → Preferences → Protocols → TCP → Try heuristic sub-dissectors first.

If all else fails, brute force: right-click one of the packets → Decode As... → RTMP.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜